Comment by powertower | Hacker News Reader

Comment by powertower | Hacker News Reader

Parent Full thread

Th problem with EV (green bar) certs is the Browser usually ends up checking the certificate status via CRL or OCSP (URI is specified in the cert), which can add an additional .5 to 10+ seconds before the page is displayed. More so when the CA servers are down or the connection times out.

So if you do go for an EV cert, go for the one that has the best listed uptime on it's CRL or OCSP servers.

Having said that, I would never spend more than $10 on a cert, and just use the most standard/common "bundled" CA cert. No one will ever know. It will have faster page loads. And those fake stories that EV certs increase conversions are exactly that, fake, and misleading. No one will real world experience has ever claimed to see a positive difference with EV certs.

The only problem with cheaper certs is you have to bundle the intermediary CA certs...

http://www.devside.net/wamp-server/installing-comodo-positiv...

I accidentally let our EV cert expire a few years ago and ordered $10 domain verified Comodo Cert to tide us over. Hilariously we saw absolutely 0 change in order metrics. I didn't renew the EV cert. EV certs are a neat idea but the average consumer doesn't understand/know about them.

You get OCSP checking for non-EV certificates too in many browsers. However, you can remove any additional delay by using OCSP stapling.

Such bad advice given the inquiry. Obviously. Lot of OP's customers are going to want the "best" certs (whatever that means). Or they're going to want "they're name in green".

It's important to answer in the context of the question.

"So if you do go for an EV cert, go for the one that has the best listed uptime on it's CRL or OCSP servers."

http://uptime.netcraft.com/perf/reports/performance/OCSP

How is the above bad advice, and not answering the context of the question? What other possible qualification is there for "best" EV certs? They are all "green bar". There is little else to them except price differences.

His customers are going to want a responsive page load time, none of them are going to pull the certificate to make sure he went with a DigiCert EV instead of a GeoTrust EV.

I was responding mainly to: "I would never spend more than $10 on a cert" and "No one will ever know" and "can add an additional .5 to 10+ seconds" and "Ev stories are fake" and "no one with real world experience has ever had positive experience".

Having worked with thousands of business in ecommerce I can guarantee you that a large percentage will want their name to appear "like PayPal and Citibank".

Reply on news.ycombinator.com